Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31E4D86C554811F1A54BEDF2CE1D38B0.roa
File: 31E4D86C554811F1A54BEDF2CE1D38B0.roa (raw, json)
Hash identifier: SdnuTgRhvRdCr5h0lM8Zeb6xeObWsx8Zp7nasm8E6DY=
Subject key identifier: 79:1F:98:77:C5:7D:47:94:C3:77:22:F8:05:8E:A4:90:58:EA:96:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CDB9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31E4D86C554811F1A54BEDF2CE1D38B0.roa
Signing time: Thu 21 May 2026 19:06:39 +0000
ROA not before: Thu 21 May 2026 19:06:34 +0000
ROA not after: Fri 10 Jul 2026 19:06:34 +0000
asID: 3257
IP address blocks: 154.81.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118201 (0x1cdb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 19:06:34 2026 GMT
Not After : Jul 10 19:06:34 2026 GMT
Subject: CN=6a0f57bf-93db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:26:35:36:f3:67:f3:21:f6:53:03:02:32:57:
ee:1d:7e:93:e0:27:f2:95:5d:3f:53:2b:3b:7e:c9:
e4:29:65:82:aa:e1:43:01:97:3c:54:bd:a7:ab:19:
c6:ff:6f:74:32:c4:87:1c:15:e4:4f:d3:54:df:b1:
f8:d7:0f:fe:b8:89:23:e4:22:81:0e:96:97:65:f7:
87:2f:52:2c:2f:3c:02:a8:e7:e9:f2:55:75:ef:2a:
fc:2a:33:b7:2d:8e:fd:16:cd:0f:99:6d:0a:76:4d:
d7:9b:7e:77:37:a9:a6:16:36:0c:1c:bb:f9:a9:43:
77:5b:5a:9b:70:cb:c4:7c:a7:4b:85:77:f3:53:97:
01:e8:e6:db:ef:45:55:47:29:9f:79:f5:34:f6:1c:
b6:1a:2c:0c:15:bb:77:84:d5:49:26:81:98:52:6c:
11:b3:ec:af:a5:be:ee:2f:ae:1f:3a:d0:98:b7:fa:
75:9b:79:1d:39:79:96:10:88:bd:4f:f4:f3:9d:5b:
3f:c4:57:23:d9:e7:8f:71:e1:6c:12:f5:98:38:d4:
c8:89:db:12:dc:4f:0e:33:dc:20:3b:b7:b2:34:bb:
45:ca:30:2d:39:12:a7:d1:60:fb:ca:a4:b0:f1:5f:
b0:cc:3b:b2:92:61:2d:72:4d:d3:02:cd:14:e6:ea:
06:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1F:98:77:C5:7D:47:94:C3:77:22:F8:05:8E:A4:90:58:EA:96:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31E4D86C554811F1A54BEDF2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:bf:64:f3:05:4d:5a:df:f9:da:fd:9f:be:b2:4e:f0:81:16:
b8:5d:16:3f:71:e1:28:26:69:f4:4a:19:0d:1b:12:4f:0d:18:
85:84:eb:17:97:95:d9:05:9d:ea:f6:15:0b:d0:e5:12:ac:db:
0c:70:08:c5:3e:5b:c3:d1:96:8f:d6:77:b1:58:fa:8f:be:85:
67:19:e4:ac:22:46:b0:f6:8e:b1:c1:4f:bd:07:d0:1d:7b:75:
13:55:ea:09:47:fe:bd:de:93:4e:48:dd:ce:9d:02:b9:fe:56:
9e:63:26:7d:8d:8f:a7:9e:e1:af:fa:cd:7f:d4:00:a0:6a:fc:
ea:7d:fc:cf:64:79:38:39:5b:72:3a:71:fa:ff:d2:86:de:34:
c9:39:2f:3c:0f:fe:d0:d8:58:ec:37:93:a2:a1:07:9d:a7:4b:
29:26:84:09:e9:8e:3a:f2:6c:19:c7:fd:c6:11:61:89:36:16:
10:02:4a:6c:d8:b7:5a:ce:f1:07:57:c6:ae:7c:96:2a:9d:39:
8b:65:e8:29:36:5b:9a:60:92:44:b0:8e:d1:84:a8:cd:6d:1a:
e8:20:2f:77:6a:8b:48:f7:e0:09:27:db:9f:5f:06:d9:13:1a:
fb:fa:05:06:82:96:4a:50:90:f1:c7:45:fe:5d:4f:93:ff:93:
72:bd:5f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:02:44 2026 by rpki-client